thesudburystar.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 19854 ms crawled 2026-05-17

US · 34.111.67.160 · AS396982 Google LLC

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title

Home | Sudbury Star

Description

Read the latest Sudbury news. We have you covered with all the latest breaking news, stories and updates affecting Sudbury today.

Language

Canonical

https://www.thesudburystar.com/

Feeds

Sudbury Star » Feed RSS

Open Graph

title: Sudbury Star
site name: thesudburystar

Technology

Server: istio-envoy
CMS: WordPress

Ads

Amazon Ads
Google Ads (DoubleClick)
Magnite

Fonts

Google Fonts

Third-party hosts loaded (17)

smartcdn.gprod.postmedia.digital×48
dcs-static.gprod.postmedia.digital×22
fonts.googleapis.com×3
auth.lrcontent.com×2
ak.sail-horizon.com×1
c.amazon-adsystem.com×1
cdn-gateflipp.flippback.com×1
edge-auth.microsoft.com×1
fem.gprod.postmedia.digital×1
fonts.gstatic.com×1
micro.rubiconproject.com×1
nexus.gprod.postmedia.digital×1
postmedia-ai.wehaacdn.com×1
sb.scorecardresearch.com×1
securepubads.g.doubleclick.net×1
tags.qortex.ai×1
www.youtube.com×1

Social

Contact

Address: Street East, Toronto, Ontario, M4W 3L4© 2026

Registration

Registrar

Webnames.ca Inc.

Created

1997-01-15

Expires

2027-01-14 238 days left

Updated

2026-04-07

Name servers

ns-cloud-b1.googledomains.com
ns-cloud-b2.googledomains.com
ns-cloud-b3.googledomains.com
ns-cloud-b4.googledomains.com

DNS records

Email authentication partial

SPF: v=spf1 include:spf-00385001.pphosted.com ~all
softfail (~all)
DMARC: v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

WR3

from 2026-04-10 to 2026-07-09

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.thesudburystar.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=(*), camera=(*), display-capture=(*), encrypted-media=(*), fullscreen=(*), geolocation=(*), microphone=(*), payment=(*)
x-content-type-options: nosniff
content-security-policy: default-src * 'unsafe-eval' 'unsafe-inline' data: blob:
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin-allow-popups